TWI385967B - Smart-switch management module system and method - Google Patents
Smart-switch management module system and method Download PDFInfo
- Publication number
- TWI385967B TWI385967B TW095116715A TW95116715A TWI385967B TW I385967 B TWI385967 B TW I385967B TW 095116715 A TW095116715 A TW 095116715A TW 95116715 A TW95116715 A TW 95116715A TW I385967 B TWI385967 B TW I385967B
- Authority
- TW
- Taiwan
- Prior art keywords
- band
- remote
- management
- remote access
- agreement
- Prior art date
Links
Classifications
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/08—Protocols specially adapted for terminal emulation, e.g. Telnet
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/02—Standardisation; Integration
- H04L41/0226—Mapping or translating multiple network management protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L67/00—Network arrangements or protocols for supporting network services or applications
- H04L67/01—Protocols
- H04L67/12—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks
- H04L67/125—Protocols specially adapted for proprietary or special-purpose networking environments, e.g. medical networks, sensor networks, networks in vehicles or remote metering networks involving control of end-device applications over a network
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L69/00—Network arrangements, protocols or services independent of the application payload and not provided for in the other groups of this subclass
- H04L69/18—Multiprotocol handlers, e.g. single devices capable of handling multiple protocols
-
- H—ELECTRICITY
- H04—ELECTRIC COMMUNICATION TECHNIQUE
- H04L—TRANSMISSION OF DIGITAL INFORMATION, e.g. TELEGRAPHIC COMMUNICATION
- H04L41/00—Arrangements for maintenance, administration or management of data switching networks, e.g. of packet switching networks
- H04L41/34—Signalling channels for network management communication
- H04L41/344—Out-of-band transfers
Landscapes
- Engineering & Computer Science (AREA)
- Computer Networks & Wireless Communication (AREA)
- Signal Processing (AREA)
- Health & Medical Sciences (AREA)
- Computing Systems (AREA)
- General Health & Medical Sciences (AREA)
- Medical Informatics (AREA)
- Computer Security & Cryptography (AREA)
- Computer And Data Communications (AREA)
- Data Exchanges In Wide-Area Networks (AREA)
- Communication Control (AREA)
- Telephonic Communication Services (AREA)
Abstract
Description
本發明係有關於電腦網路管理領域,特別是用於存取與管理電腦、網路、及電信系統設備之方法,其可利用針對遠端管理存取之帶內及帶外技術與協定。The present invention relates to the field of computer network management, and more particularly to methods for accessing and managing computer, network, and telecommunications system equipment, utilizing in-band and out-of-band technologies and protocols for remote management access.
資訊科技專家通常使用工具來遠端存取與控制諸如電腦伺服器之網路節點。這些傳統遠端存取工具允許IT專家遠端地管理與儲存網路節點之操作。傳統上,這些遠端存取工具分成兩類:帶內工具和帶外工具。一帶內工具與被管理裝置之通訊仰賴與該被通訊裝置用以連接資料網路相同之一網路介面。一帶外管理工具利用專門用來進行管理之一分離式存取媒體(諸如一連串操縱埠或鍵盤視訊滑數介面)與被管理裝置通訊。帶外工具允許管理者即使在被管理裝置失去網路連接時能可存取被管理裝置。IT professionals typically use tools to remotely access and control network nodes such as computer servers. These traditional remote access tools allow IT professionals to remotely manage and store the operation of network nodes. Traditionally, these remote access tools fall into two categories: in-band tools and out-of-band tools. The communication between the in-band tool and the managed device depends on the same network interface as the communication device is used to connect to the data network. An out-of-band management tool communicates with the managed device using a separate access medium (such as a series of manipulations or keyboard video slides) dedicated to management. Out-of-band tools allow administrators to access managed devices even when the managed device loses network connectivity.
帶內解決方案中,被管理裝置與遠端存取客戶端利用習知網路協定(例如遠端桌面協定(RDP)、安全殼層系統(SSH)、虛擬網路計算(VNC))通訊。帶內工具允許網路管理員在網路上(企業網路、網際網路、及/或超網路)任何地方的另一電腦利用簡單的程式(「檢視器」或遠端存取客戶端)來檢視及與被管理裝置互動。兩個電腦毋需為同一類型,故舉例來說,一個人可使用一帶內工具來檢視你家裡 的視窗(Windows)作業系統PC上的Linux伺服器。第1圖顯示帶內工具如果運作。In the in-band solution, the managed device communicates with the remote access client using conventional network protocols such as Remote Desktop Protocol (RDP), Secure Shell System (SSH), Virtual Network Computing (VNC). In-band tools allow network administrators to use simple programs ("viewers" or remote access clients) on another computer anywhere on the network (enterprise network, internet, and/or supernet) To view and interact with managed devices. The two computers need to be of the same type, so for example, one can use an in-band tool to view your home. Windows (Windows) operating system on the Linux server. Figure 1 shows the in-band tool if it works.
帶內解決方案包含三個不同的構件:設於被管理裝置中之遠端存取服務、設於客戶端節點之遠端存取客戶端、以及用為伺服器與客戶端設備間之通訊路徑的網路。基於架構之因素,任一帶內工具需求這三種構件都完全地作用。如果被管理裝置未完全地作用,遠端存取服務軟體將不能完全地作傭而使得客戶端軟體將無法存取被管理裝置。同樣地,若網路有問題,遠端存取客戶端將無法達成遠端存取服務而使得此解決方案不能用。基於這些理由,帶內工具通常在這種構件只有少許或沒有錯誤發生之風險下被遠端地使用於路由維護。The in-band solution consists of three different components: a remote access service located in the managed device, a remote access client located at the client node, and a communication path between the server and the client device. Network. Based on the architectural factors, all three in-band tool requirements are fully functional. If the managed device is not fully functional, the remote access service software will not be fully commissioned and the client software will not be able to access the managed device. Similarly, if there is a problem with the network, the remote access client will not be able to reach the remote access service and the solution will not work. For these reasons, in-band tools are typically used remotely for route maintenance at the risk of such components having little or no error.
帶內工具被包括在所有的大作業系統中。人們習慣不外加費用地備有工具。其他重要的特性係效能與效率。由於帶內工具包括嵌於被管理裝置內的一構件,故伺服器客戶端通訊可被最佳化而緊密地耦接至一般地區使用者介面,其使得潛伏期和頻寬需求最小。今日社會上提供許多解決方案(開放原始碼及商業廣告),其允許諸如Citrix Metafream、Tarantella、PC Anyehere、OpenSSH、SecureCRT等帶內遠端存取。In-band tools are included in all large operating systems. People are used to having tools at no extra cost. Other important features are efficiency and efficiency. Since the in-band tool includes a component embedded within the managed device, server client communication can be optimized and tightly coupled to the general regional user interface, which minimizes latency and bandwidth requirements. There are many solutions available today (open source and commercial) that allow in-band remote access such as Citrix Metafream, Tarantella, PC Anyehere, OpenSSH, SecureCRT.
然而,每當與被管理裝置相關聯之網路路徑故障或被管理裝置失去連線時,帶內存取工具變得沒有效率。為了解決此限制,建立了能夠遠端存取被管理裝置之帶外管理埠之工具。這些帶外工具使用諸如串列操縱臺及KVM埠之 介面來產生管理資料。第2圖顯示帶外工具如何作動。However, the in-band access tool becomes inefficient whenever the network path associated with the managed device fails or the managed device loses connectivity. In order to address this limitation, a tool is provided that provides remote access to the out-of-band management of the managed device. These out-of-band tools use such as tandem consoles and KVM Interface to generate management information. Figure 2 shows how the out-of-band tool works.
帶內工具,諸如RDP或SSH,通常用於日以繼夜的被管理裝置維護,由於它們允許最即時的安全遠端存取系統,及允許操作者有如在系統本地進行任何工作。通常網路被最佳化且提供一低頻寬利用(相較於諸如KVM/IP之帶外協定)及具即小潛伏期之絕佳效能的組合。被需求以利用這些協定的遠端存取客戶端軟體成本低廉,許多場合中,被包括在客戶端節點作業系統內,其造成使用成本之低廉。帶內工具的主要缺點在於它們需求被管理裝置和網路在一穩定的狀況下,故無法被用在被管理裝置失去連線之情況中。In-band tools, such as RDP or SSH, are typically used for maintenance devices that are being maintained around the clock, as they allow for the most immediate secure remote access system and allow the operator to do whatever is done locally on the system. Typically the network is optimized and provides a low frequency wide utilization (compared to an out-of-band protocol such as KVM/IP) and a combination of excellent performance with small latency. Remote access client software that is required to utilize these protocols is inexpensive, and in many cases, is included in the client node operating system, which results in low cost of use. The main disadvantage of in-band tools is that they require the managed device and the network to be in a stable condition and cannot be used in situations where the managed device loses connectivity.
相對的,帶外工具通常用於緊急存取無法透過帶內工具存取之系統、或用於會對帶內工具造成某些干擾(例如改變IP位址、路由一表組態、或執行要求系統重新啟動之操作)的高風限管理任務。一帶外解決方案包含三構件:(1)帶外裝置,其介接被管理裝置之帶外介面並將資料轉換成適於在網路上傳輸之格式;(2)遠端存取客戶端,其設於客戶端節點內並與帶外裝置通訊;(3)以及帶外網路,其用作帶外裝置與遠端存取客戶端之間通訊之路徑。注意,某些情況下,帶外裝置會設於被管理裝置內部,諸如嵌於主機板上的一服務處理器,但其仍為一全然不同的實體,且其功能不仰賴被管理裝置。今日所使用的帶外裝置包括操縱臺伺服器,像是Clylades AlterPath ACS及LantroNIX SecureLinx、IP交換上之KVM,像是Clylades AlterPath KVM/net和Avocent DS Series、以及BMC(基板管理控制器),像是HP iLO及IPMI。In contrast, out-of-band tools are typically used for emergency access systems that are not accessible through in-band tools, or for causing some interference to in-band tools (such as changing IP addresses, routing a table configuration, or execution requirements). High wind limit management tasks for system restart operations). An out-of-band solution consists of three components: (1) an out-of-band device that interfaces with the out-of-band interface of the managed device and converts the data into a format suitable for transmission over the network; (2) a remote access client, It is located in the client node and communicates with the out-of-band device; (3) and the out-of-band network, which serves as a path for communication between the out-of-band device and the remote access client. Note that in some cases, the out-of-band device may be located inside the managed device, such as a service processor embedded in the motherboard, but it is still a completely different entity and its functionality does not depend on the managed device. The out-of-band devices used today include console servers such as Clylades AlterPath ACS and LantroNIX SecureLinx, and KVM over IP switching, such as Clylades AlterPath. KVM/net and Avocent DS Series, and BMC (Baseboard Management Controller), such as HP iLO and IPMI.
帶外解決方案較帶內解決方案更貴。帶外裝置通常需求更多網路頻寬,且在高-潛伏期,低-頻寬網路上經常執行不良。同步連接數量亦有限制。帶外裝置通常具有提供同步管理對話上的數量限制,而增加數量即變貴。Out-of-band solutions are more expensive than in-band solutions. Out-of-band devices typically require more network bandwidth and often perform poorly on high-latency, low-bandwidth networks. There are also restrictions on the number of simultaneous connections. Out-of-band devices typically have a limit on the number of simultaneous management sessions provided, while increasing the number becomes expensive.
帶外工具利用一專用管理連接來存取被管理裝置,故此,即使在系統不穩定時,帶外連接仍然可正常使用。由於需求帶外工具來將信號轉成一種適於在TCP/IP上安全傳輸之形式,網路頻寬之需求將會比使用帶內工具時高,遠端存取客戶端之效能較低,所引用之潛伏期和部署必須基礎建設之花費會較使用帶內工具高。The out-of-band tool utilizes a dedicated management connection to access the managed device, so that the out-of-band connection can still be used even when the system is unstable. Due to the need for out-of-band tools to convert signals into a form suitable for secure transmission over TCP/IP, the bandwidth requirements of the network will be higher than when using in-band tools, and the performance of remote access clients is lower. The latency and deployment required for the infrastructure will be higher than the cost of using in-band tools.
以最有用及有效率之方式涵蓋所有遠端存取需求,需要一種兼用帶內與帶外工具的組合方式。有些公司已提出允許例如Xceeedium之SSL-UAG+產品的解決方案。然而此類方式顯現出下列諸多關鍵限制:Covering all remote access requirements in the most useful and efficient manner requires a combination of in-band and out-of-band tools. Some companies have proposed solutions that allow SSL-UAG+ products such as Xceeedium. However, this approach shows the following key limitations:
.使用者必須存取多個遠端存取客戶端(檢視器)以使用各個帶內與帶外工具。. The user must access multiple remote access clients (viewers) to use the various in-band and out-of-band tools.
.使用者必須經訓練使用不同的遠端存取客戶端及經訓練選擇所用之存取方法。這導致部署與擁有之成本增加、亦增加人為錯誤。. Users must be trained to use different remote access clients and access methods used for training selections. This has led to increased costs for deployment and ownership, as well as increased human error.
.使用者必須在任何給定時間決定利用哪種工具(帶內或帶外)。這會導致在連接不可得或帶外連接被另一使用者不必要地封鎖時失去個人生產力。. The user must decide which tool to use (in-band or out-of-band) at any given time. This can result in loss of personal productivity when the connection is unavailable or the out-of-band connection is unnecessarily blocked by another user.
.網路頻寬會被操作者在明明一帶內工具可用卻選擇一帶外工具時造成無效率地使用。. The network bandwidth is inefficiently used by the operator when the tool is available in the clear zone but selects an out-of-band tool.
.操作者會無預期地失去與被管理資產之連接,而被要求利用其他協定重新連接。這會造成困擾,且導致更多人為錯誤的出現。. The operator loses the connection to the managed asset unexpectedly and is required to reconnect using other agreements. This can cause problems and lead to more human error.
因此,毋人希望提供一種組合帶內存取和工具與帶外存取和工具之智慧型交換器模組,同時克服傳統解決方案中組合帶內與帶外工具之限制,而這正是本發明之目的。Therefore, the Deaf wants to provide a smart switch module that combines in-band access and tools with out-of-band access and tools, while overcoming the limitations of combining in-band and out-of-band tools in traditional solutions. The purpose of the invention.
依據本發明之一智慧型交換器模組包含用來智慧而自動地在網路管理資料流之間交換的系統與方法,其提供連續的遠端存取一過更多被管理系統,減少端管理解決方案之複雜性,使網路頻寬最佳化,提出最佳存取與回應次數,以及使管理資源之可用性最大化。此系統藉由組合帶工具與帶外工具來提出連續存取一或更多被管理系統,其中帶內工具通常在管理中系統在服務中時需要較低網路頻寬而提供具較少潛伏期的較佳回應時間,而帶外工具在網路介面或作業系統變得不穩定時或系統被一操作者控制或不預期地落入服務外狀況時提供對管理中系統之連續存取。A smart switch module in accordance with the present invention includes a system and method for intelligently and automatically exchanging between network management data streams, which provides continuous remote access over one more managed system, reducing the end Manage the complexity of the solution, optimize network bandwidth, propose optimal access and response times, and maximize the availability of management resources. The system proposes continuous access to one or more managed systems by combining a tape tool with an out-of-band tool, where the in-band tool typically requires a lower latency and a lower latency when the system is in service. The better response time, while the out-of-band tool provides continuous access to the system under management when the network interface or operating system becomes unstable or when the system is controlled by an operator or unexpectedly falls outside the service.
本發明係為一系統,其包括但不限於多種不同的遠端管理存取協定:遠端桌面協定(RDP)、虛擬網路計算(VNC)、獨立計算架構(ICA)、X-Windows(X.11)、KVM/IP、SSH、Telnet、串列操縱臺、Serial over LAN(SOL)、IPMI、及其他尚未開發之遠端管理存取協定亦包含在本發明之範圍。The present invention is a system including, but not limited to, a variety of different remote management access protocols: Remote Desktop Protocol (RDP), Virtual Network Computing (VNC), Independent Computing Architecture (ICA), X-Windows (X) .11), KVM/IP, SSH, Telnet, Serial Console, Serial over LAN (SOL), IPMI, and other undeveloped remote management access protocols are also within the scope of the present invention.
本發明包括用來確定各個可用於任何管理中系統之協定的可用性的監視服務、及根據網路狀況、被管理系統、及管理員之現有連接選擇設定來針對現有對話評估各協定適用性之一決策引擎。本發明在任一對話期間繼續監視協定,且在現有對話協定不可用時或更多有效率的對話協定可用時進行交換至另一對話協定(利用該決策引擎)。The present invention includes monitoring services for determining the availability of various protocols available for use in any managed system, and evaluating one of the applicability of each agreement for an existing session based on network conditions, managed systems, and administrators' existing connection selection settings. Decision engine. The present invention continues to monitor the agreement during any session and exchanges to another session agreement (using the decision engine) when an existing dialog agreement is unavailable or when more efficient dialog agreements are available.
藉用本發明,傳統系統之許多優點存在。譬如,網路頻寬經由在更有效率的協定(例如帶內)可用時選擇它們,而在被管理中系統狀況支配時切換到較不理想的協定來最佳化。此外,管理介面中之回應時間與潛伏期經由選擇最理想的協定(譬如在帶內可用時選擇帶內)而只在受配管理系統之狀況所支配時才選擇較不理想的協定(例如帶外)來最小化。本系統亦使得連接繼續性最大化,藉由在連接方法與受各協定可用性支配之協定之間進行交換。使用者藉由更有效的使用可用網路頻寬及在較強協定可被使用時利用它們來使得競奪最小化。另外,管理基礎建設成本藉由使昂貴的帶外技術與操作者訓練之利用最佳化而最小化,而人為錯誤藉由提供無間隔的協定間交換而最小化,由於操作者不需瞭解需用哪個協定或哪種軟體應用程式來存取一系統。Many advantages of conventional systems exist by virtue of the present invention. For example, network bandwidth is selected by selecting them when more efficient protocols (eg, in-band) are available, and switching to less desirable protocols to optimize when managed by system conditions. In addition, the response time and latency in the management interface are chosen to be less desirable (eg out-of-band) when selecting the best agreement (eg, selecting in-band when available in-band) and only when governed by the status of the managed system. To minimize. The system also maximizes connection continuity by exchanging between the connection method and the agreement governed by the availability of each agreement. Users can minimize competition by making more efficient use of available network bandwidth and using them when stronger protocols can be used. In addition, management infrastructure costs are minimized by optimizing the use of expensive out-of-band technology and operator training, while human error is minimized by providing an inter-collection exchange without gaps, since the operator does not need to understand Which protocol or software application is used to access a system.
依據本發明之智慧型交換器模組可實施以許多不同方式,其全部屬於本發明之範圍內。舉例來說,智慧型交換器模組可實施以可直接載於一管理員工作站內之一軟體模組或應用程式、或可用為插入大型集中管理伺服器之軟體模組或應用程式,譬如HP OPenView、IBM Tivoli、IBM Director、微軟系統管理伺服器等。智慧交換模組亦可實施以整合在包括帶外實體存取媒體之設備上,諸如,一與KVM/IP開關整合之軟體模組。另可選擇地,智慧型交換器模組可實施為整合與一存取管理閘道設備之軟體,諸如Clylades AlterPath Manager、Xceedium SSL-UAG+、Avocent DS View、Raritan Command Center。智慧型交換器模組亦可利用一特定應用積體電路來實施。The smart switch module in accordance with the present invention can be implemented in a number of different manners, all of which are within the scope of the present invention. For example, a smart switch module can be implemented as a software module or application that can be directly loaded into an administrator workstation, or a software module or application that can be inserted into a large centralized management server, such as HP. OPenView, IBM Tivoli, IBM Director, Microsoft System Management Server, etc. The smart switching module can also be implemented to integrate on a device that includes an out-of-band physical access medium, such as a software module integrated with a KVM/IP switch. Alternatively, the smart switch module can be implemented as a software integrated with an access management gateway device, such as Clylades AlterPath Manager, Xceedium SSL-UAG+, Avocent DS View, Raritan Command Center. The smart switch module can also be implemented using a specific application integrated circuit.
第1圖繪示帶內工具之使用。Figure 1 illustrates the use of in-band tools.
第2圖繪示帶外工具之使用。Figure 2 shows the use of the out-of-band tool.
第3圖繪示依據本發明之一智慧型交換器模組,其中繪示兩個從模組到被管理裝置之管理流。FIG. 3 illustrates a smart switch module according to the present invention, wherein the management flow of the two slave modules to the managed device is illustrated.
第4圖繪示利用KVM/IP之一傳統帶外存取解決方案。Figure 4 illustrates a traditional out-of-band access solution using KVM/IP.
第5圖繪示利用RDP之一傳統帶內存取解決方案。Figure 5 illustrates a conventional in-band access solution utilizing RDP.
第6圖繪示依據本發明之一實施例的一智慧型交換器模組。FIG. 6 illustrates a smart switch module in accordance with an embodiment of the present invention.
第7圖係依據本發明之一實施例的一智慧型交換器模組之一方塊圖第8圖係依據本發明之一實施例利用智慧型交換器模組之網路管理方法的一流程圖第9圖係一流程圖,其顯示由智慧型交換器模組建立連接的方法。FIG. 7 is a block diagram of a smart switch module according to an embodiment of the present invention. FIG. 8 is a flowchart of a network management method using a smart switch module according to an embodiment of the present invention. Figure 9 is a flow chart showing a method of establishing a connection by a smart switch module.
第10圖係顯示一種利用依據本發明之智慧型交換器模組來監視所建立連接之一流程圖。Figure 10 is a flow chart showing one of the established connections using the smart switch module in accordance with the present invention.
本發明特別可應用在微軟視窗伺服器之遠端管理解決方案,其利用針對帶外存取之遠端KVM/IP及使用針對帶內存取之遠端桌面協定RDP,且將於本發明之說明書中說明。然而可瞭解的是,依據本發明之系統與方法具有絕佳的功效,因為(1)此系統可用與任何現有介面與協定以及任何新開發介面和協定;(2)系統可以許多方式實施而其係數本發明之範圍。The present invention is particularly applicable to a remote management solution for Microsoft Windows Server, which utilizes remote KVM/IP for out-of-band access and remote desktop protocol RDP for in-band access, and will be in accordance with the present invention. Description in the manual. It will be appreciated, however, that the system and method in accordance with the present invention have excellent efficacy because (1) the system can be used with any existing interface and protocol and any newly developed interfaces and protocols; (2) the system can be implemented in many ways. The coefficients are within the scope of the invention.
第3圖例說依據本發明之一智慧型交換器系統20。智慧型交換器模組接收從系統20到一被管理裝置(未示)之一第一管理資料流22及一第二管理資料流24。在此例中,一流22係利用帶內存取管理中系統,而另一流24係利用帶外存取同一系統(經由未顯示之一帶外裝置)。依據本發明,系統在流之間選擇並獨立地從用來與此時被管理系統通訊之流傳遞一智慧流26到使用者應用程式。因為,模組藉由組合帶內工具和帶外工具來提供連續存取一或更多被管理系統,其中帶內工具通常在管理中系統在服務中時需要較低網路頻寬而提供具較少潛伏期的較佳回應時間,而帶外工具在網路介面或作業系統變得不穩定時或系統被一操作者控制或不預期地落入服務外狀況時提供對管理中系統之連續存取。為了更瞭解本發明之智慧型交換器模組,現在說明一典型的帶外系統與帶內系統。Figure 3 illustrates a smart switch system 20 in accordance with the present invention. The smart switch module receives a first management data stream 22 and a second management data stream 24 from the system 20 to a managed device (not shown). In this example, the best-in-class 22 utilizes the in-band access management system while the other stream 24 utilizes the out-of-band access to the same system (via one of the out-of-band devices not shown). In accordance with the present invention, the system selects between streams and independently passes a smart stream 26 to the user application from the stream used to communicate with the managed system at this time. Because the module provides continuous access to one or more managed systems by combining in-band tools and out-of-band tools, where in-band tools typically require lower network bandwidth while the system is in service in management. Better response time with less latency, while out-of-band tools provide continuous storage of the system under management when the network interface or operating system becomes unstable or when the system is controlled by an operator or unexpectedly falls outside the service take. To better understand the smart switch module of the present invention, a typical out-of-band system and in-band system will now be described.
第4圖繪示傳統上針對利用KVM/IP技術與KVM/IP交換30之微軟視窗系統的一傳統帶外系統之圖。此圖中,各個被管理裝置/系統(此例中之伺服器S1-Sn)在鍵盤、視訊、及滑鼠連接器和KVM/IP設備之間具有一實體連接,其作為用來以任何習知方式提供存取任一伺服器之多工器。一或更多本地使用者,例如本地使用者LU1和LU2,利用專用KVM連接實體連接至KVM/IP交換30,並可藉由導覽嵌於KVM/IP交換30中之一清單系統而個別存取每一伺服器。一或更多遠端使用者,例如遠端使用者RU1和RU2,可利用一典型網路瀏覽器透過乙太網路連接或網際網路連接來建立連接,並導覽KVM/IP交換中之一清單系統來選擇該遠端使用者欲連接的一伺服器。在此點,一KVM/IP檢視器應用程式(未示,但為習知)在遠端使用者工作站(實體上位於遠端使用者位置)中起動,其建立至KVM/IP交換之連接而通到伺服器。此傳統帶外系統之限制係僅有限數量的使用者可存取系統,使得成本有限的方式下無法同步存取所有的系統。此傳統解決方案更限制KVM/IP協定所需網路頻寬相對較高,而KVM/IP之本值表示操作者遭遇潛伏期且無法同步化,譬如滑鼠指標,導致系統無效率的使用。Figure 4 is a diagram of a conventional out-of-band system traditionally directed to a Microsoft Windows system utilizing KVM/IP technology and KVM/IP exchange 30. In this figure, each managed device/system (servers S1-Sn in this example) has a physical connection between the keyboard, video, and mouse connector and the KVM/IP device, which is used as any Known mode provides a multiplexer that accesses any server. One or more local users, such as local users LU1 and LU2, are connected to the KVM/IP exchange 30 using a dedicated KVM connection entity and can be stored individually by navigating one of the list systems embedded in the KVM/IP exchange 30 Take each server. One or more remote users, such as remote users RU1 and RU2, can establish a connection via an Ethernet connection or an Internet connection using a typical web browser and navigate through the KVM/IP exchange. A list system is used to select a server that the remote user wants to connect to. At this point, a KVM/IP viewer application (not shown, but conventionally) is launched in the remote user workstation (physically located at the remote user location), which establishes a connection to the KVM/IP exchange. Pass to the server. The limitation of this traditional out-of-band system is that only a limited number of users can access the system, making it impossible to access all systems simultaneously in a cost-effective manner. This traditional solution limits the network bandwidth required by the KVM/IP protocol to a relatively high level, while the native value of KVM/IP indicates that the operator is experiencing latency and cannot be synchronized, such as the mouse pointer, resulting in inefficient use of the system.
第5圖呈現針對利用習知遠端桌面協定(RDP)來提出遠端存取操作者之微軟視窗系統的一傳統帶內系統。圖中,一或更多被管理裝置/系統,例如一或更多伺服器S1-Sn,利用乙太網路或利用具有PPP之遠端撥接連線來連至一生產或管理網路。一或更多遠端使用者,例如遠端使用者RU1和RU2,亦被連至網路且可利用一嵌入式RDP客戶端檢視器在一TCP/IP連接上存取伺服器。此帶內系統相對於KVM/IP(第4圖)具有優勢在於其系統更有效率於在網路上傳輸,而造成較低頻寬之利用及較佳回應時間。協定密切耦接至作業系統本身之視訊子系統亦意謂可以完全同步化,其造成更效率的使用者經驗。然而此帶內系統之限制在於僅可用在作業系統/網路執行中因而無法覆蓋到帶外或服務外狀況之範圍。Figure 5 presents a conventional in-band system for a Microsoft Windows system that utilizes the conventional Remote Desktop Protocol (RDP) to present remote access operators. In the figure, one or more managed devices/systems, such as one or more servers S1-Sn, are connected to a production or management network using Ethernet or using a remote dial-up connection with PPP. One or more remote users, such as remote users RU1 and RU2, are also connected to the network and can access the server over a TCP/IP connection using an embedded RDP client viewer. This in-band system has an advantage over KVM/IP (Figure 4) in that its system is more efficient for transmission over the network, resulting in lower bandwidth utilization and better response times. The close coupling of the protocol to the video subsystem of the operating system itself also means that it can be fully synchronized, resulting in a more efficient user experience. However, the limitation of this in-band system is that it can only be used in the operating system/network execution and thus cannot cover out-of-band or out-of-service conditions.
為了提供一種有效的管理存取解決方案,必須使用此兩種方式(帶內和帶外)。不使用本發明下述方式的話,兩種方式(帶內與帶外)之組合會因為管理者需應付兩個不同的遠端存取系統以及必須在給定時間決定使用哪個系統,而使得管理困難以及人為錯誤。依據本發明之智慧型交換器模組解決此問題,並提供帶內與帶外遠端存取之組合同時減少管理的困難性。In order to provide an effective management access solution, both methods (in-band and out-of-band) must be used. Without the use of the invention described below, the combination of the two approaches (in-band and out-of-band) will result in management due to the manager having to deal with two different remote access systems and having to decide which system to use at a given time. Difficulties and human error. The smart switch module in accordance with the present invention solves this problem and provides a combination of in-band and out-of-band remote access while reducing management difficulties.
第6圖呈現智慧型交換器系統20之一實施例,特別是依法據本發明之一智慧型交換器模組。依據本發明,帶外存取(在此處所述範例中之KVM)和帶內存取(在此處所述範例中之RDP)被組合於一解決方案中,且本發明係用來提供可監視帶內與帶外之連接狀態並動態地在兩個存取型式間進行交換以提供有用及有效率存取被管理系統之一單一客戶端檢視器。在一實施例中,一或更多被管理裝置/系統,諸如此例中之伺服器S1-Sn,可利用專用KVM連接42來直接連接到智慧型交換器模組40。被管理系統亦可連接至一生產及/或管理網路,其可透過一連接46(例如乙太網路或利用PPP之撥接)來傳輸習知遠端桌面協定(RDP)流量到智慧型交換器模組40。Figure 6 shows an embodiment of a smart switch system 20, and in particular a smart switch module according to the present invention. In accordance with the present invention, out-of-band access (KVM in the examples described herein) and in-band access (RDP in the examples described herein) are combined in a solution, and the present invention is used to provide The in-band and out-of-band connection status can be monitored and dynamically exchanged between the two access patterns to provide a useful and efficient access to one of the managed system single client viewers. In one embodiment, one or more managed devices/systems, such as servers S1-Sn in this example, may be directly connected to the smart switch module 40 using a dedicated KVM connection 42. The managed system can also be connected to a production and/or management network that can transmit conventional Remote Desktop Protocol (RDP) traffic to a smart switch over a connection 46 (eg, Ethernet or PPP dial-up) Module 40.
利用KVM與RDP管理之典型系統係微軟Windows 2000,其包括硬體的KVM介面和包括兩個RDP協定服務。習知如KVM/IP交換之典型KVM存取裝置係由席克拉達斯公司生產的AlterPath KVMnet、以及Avocent的DSR系列開關。RDP客戶端應用程式係實施為Windows XP和其他Windows平台中之標準,也可用於遠端桌面專案之Linux和Unix。一或更多本地使用者,例如此例中之本地使用者LU1和LU2可利用專用鍵盤、視訊、滑鼠纜線50被連接至智慧型交換器模組40,以及一或更多遠端使用者,例如此例中之遠端使用者LU1和LU2,可利用典型網路瀏覽器經由連接46來連接。依據本發明,每一本地與遠端使用者利用具有有充分計算能力及記憶體來與智慧型交換器模組進行互動之一典型電腦系統存取系統。使用者的電腦系統可包括,例如個人電腦、工作站、終端機、PDA、無線裝置、蜂巢式電話等。每一使用者的電腦系統可為習知之一管理站。A typical system managed by KVM and RDP is Microsoft Windows 2000, which includes a hardware KVM interface and includes two RDP protocol services. A typical KVM access device such as the KVM/IP exchange is AlterPath KVMnet manufactured by Sikradas and Avocent's DSR series switches. The RDP client application is implemented as a standard in Windows XP and other Windows platforms, as well as Linux and Unix for remote desktop projects. One or more local users, such as local users LU1 and LU2 in this example, can be connected to the smart switch module 40 and one or more remote terminals using a dedicated keyboard, video, mouse cable 50 For example, remote users LU1 and LU2 in this example can be connected via connection 46 using a typical web browser. In accordance with the present invention, each local and remote user utilizes a typical computer system access system having sufficient computing power and memory to interact with the smart switch module. The user's computer system may include, for example, a personal computer, a workstation, a terminal, a PDA, a wireless device, a cellular phone, and the like. Each user's computer system can be one of the conventional management stations.
一使用者(不論是遠端或本地)接著可登入智慧型交換器模組40,且呈現以指出特定使用者被允許存取之系統的一清單。依據本發明,多個使用者能夠同不存取被管理系統。使用者接著可選擇他們想要連接之系統,然後智慧型交換器模組40會啟動一檢視器應用程式(在使用者的電腦)來允許使用者存取被管理系統之圖型化介面。使用者檢視器應用程式將不直接連接到被管理系統,但會連至智慧型交換器模組設於智慧型交換器模組40中之情況。智慧型交換器模組40會連續而自動地(不需使用者動作)監視被管理系統之帶內與態外服務可用性,且結合使用者與系統寬優先性會決定採用哪個路徑來連至被管理系統。A user (whether remote or local) can then log into the smart switch module 40 and present a list of systems that indicate that a particular user is allowed access. According to the present invention, a plurality of users can access the managed system at the same time. The user can then select the system they want to connect to, and then the smart switch module 40 launches a viewer application (on the user's computer) to allow the user to access the graphical interface of the managed system. The user viewer application will not be directly connected to the managed system, but will be connected to the smart switch module set in the smart switch module 40. The smart switch module 40 continuously and automatically (without user action) monitors the in-band and out-of-state service availability of the managed system, and combines the user and system wide priority to determine which path to use to connect to the Management system.
在許多範例方案中,系統優先性可指出每當RDP可用時應優先於KVM/IP被使用。此優先性會提供使用者以最低的頻寬使用來同時存取所有的被管理系統。此優先性亦提供在回應時間與同步化方面的最佳使用者經驗。在此方案中,智慧型交換器模組被組配來在RDP服務不可用時利用KVM/IP。在此方案中,遠端使用者可建立至智慧型交換器模組之連接並選擇使用者所欲連接之被管理裝置/系統。智慧型交換器模組接著在使用者電腦系統啟動一檢視器應用程式,其連回智慧型交換器模組。此智慧型交換器模組可接著檢查屬性組態(前述)以及看看RDP是否為較佳連接方法,探測被管理裝置(一特定伺服器)來建立可可供該特定被管理裝置用之RDP服務之存在。若服務可用,此連接利用RDP建立。若服務不可用,KVM/IP對話會被建立,由於優先性亦使得KVM/IP在RDP服務不能用時可用。即使RDP協定可用且用於連接,此智慧型交換器模組會繼續監視服務,且在任何干擾的情況下會自動且直接切換成一KVM/IP對話。由於微軟視窗作業系統之屬性關係,使用者可能被要求再次登入被管理系統,但這樣模式會根據被管理系統之屬性與能力而變化。In many example scenarios, system prioritization may indicate that KVM/IP should be used in preference to RDP whenever it is available. This priority will provide the user with the lowest bandwidth to access all managed systems simultaneously. This priority also provides the best user experience in response time and synchronization. In this scenario, the smart switch modules are configured to utilize KVM/IP when the RDP service is unavailable. In this scenario, the remote user can establish a connection to the smart switch module and select the managed device/system to which the user wants to connect. The smart switch module then launches a viewer application on the user's computer system, which is connected back to the smart switch module. The smart switch module can then check the attribute configuration (described above) and see if the RDP is a preferred connection method, detecting the managed device (a specific server) to establish an RDP service available to the particular managed device. Existence. If the service is available, this connection is established using RDP. If the service is not available, a KVM/IP session will be established, and KVM/IP will be available when the RDP service is unavailable due to the priority. Even if the RDP protocol is available and used for connectivity, the smart switch module will continue to monitor the service and automatically and directly switch to a KVM/IP session in the event of any interference. Due to the attribute relationship of the Microsoft Windows operating system, the user may be required to log in to the managed system again, but this mode will vary depending on the attributes and capabilities of the managed system.
第7圖係一方塊圖,其繪示依據本發明之智慧型交換器模組之一電腦系統60軟體實施。此實施中,智慧型交換器模組實施以被一設備所執行之軟體模組/應用程式。此智慧型交換器模組亦可直接裝載於一管理者工作站或可用為一大型集中管理系統(譬如HP OpenView、IBM Tivoli、IBM Director、微軟系統管理伺服器等)之插件。智慧型交換模組亦可實施以整合在包括帶外實體存取媒體之設備上,諸如,一與KVM/IP開關整合之軟體模組。另可選擇地,智慧型交換器模組可實施為整合與一存取管理閘道設備之軟體,諸如Clylades AlterPath Manager、Xceedium SSL-UAG+、Avocent DS View、Raritan Command Center。智慧型交換器模組亦可利用一特定應用積體電路(ASIC)來實施。此模組亦可實施以依據本發明之一服務處理器路徑。Figure 7 is a block diagram showing the software implementation of a computer system 60 in accordance with one of the smart switch modules of the present invention. In this implementation, the smart switch module implements a software module/application that is executed by a device. The smart switch module can also be directly loaded on a manager workstation or can be used as a plug-in for a large centralized management system (such as HP OpenView, IBM Tivoli, IBM Director, Microsoft System Management Server, etc.). The smart switching module can also be implemented to integrate on devices that include an out-of-band physical access medium, such as a software module integrated with a KVM/IP switch. Alternatively, the smart switch module can be implemented as a software integrated with an access management gateway device, such as Clylades AlterPath Manager, Xceedium SSL-UAG+, Avocent DS View, Raritan Command Center. The smart switch module can also be implemented using an application specific integrated circuit (ASIC). This module can also be implemented to service processor paths in accordance with one of the present inventions.
電腦系統具有多種未示於第7圖之習知構件,包括一顯示器裝置和各種輸入/輸出周邊。此電腦系統60亦具有一CPU62和一永久儲存裝置64,諸如一磁碟機、一光碟機、一卡帶機、非依電性記憶體等,以及暫存記憶體66,例如DRAM或SRAM或快閃記憶體,其中CPU、永久儲存裝置、和暫時記憶體係耦接在一起。永久儲存裝置儲存一或更多軟體應用程式模組,同時暫時記憶體儲存一或更多軟體應用程式/模組,而應用程式/模組如習知地被CPU所執行。為了實施依據本發明之智慧型交換器模組,一或更多軟體模組可被設在暫時記憶體66中,並可被CPU62所執行。特別是,電腦系統可執行一典型作業系統68及一智慧型交換器軟體應用程式70。智慧型交換器軟體應用程式70可包括一監視器模組72、一引擎模組74、一或更多協定轉接器76、及一或更多檢視器78。此監視器模組可監視網路管理服務來確定可用於任何被管理系統之各協定之可用性。引擎模組74根據網路狀況與被管理系統與管理員當前之連接選擇設定來評估用於當前對話之各協定的適切性,並選擇協定/服務。依據本發明,在任何對話期間繼續監視協定,且在當前之對話協定變得不可用、或更有效率之對話協定可用時,將交換到另可選用之對話協定(利用決策引擎)。依據本發明,額外的協定轉接器可在任何時間被併入系統,使得系統可以處理任何新的協定。一或更多檢視器78允許智慧型交換器模組提供檢視器應用程式給系統之每一使用者。The computer system has a variety of conventional components not shown in Figure 7, including a display device and various input/output peripherals. The computer system 60 also has a CPU 62 and a permanent storage device 64, such as a disk drive, a CD player, a cassette player, non-electrical memory, etc., and a temporary memory 66, such as DRAM or SRAM or fast. Flash memory in which the CPU, permanent storage, and temporary memory system are coupled together. The permanent storage device stores one or more software application modules while the temporary memory stores one or more software applications/modules, which are conventionally executed by the CPU. In order to implement the smart switch module in accordance with the present invention, one or more software modules can be provided in the temporary memory 66 and can be executed by the CPU 62. In particular, the computer system can execute a typical operating system 68 and a smart switch software application 70. The smart switch software application 70 can include a monitor module 72, an engine module 74, one or more protocol adapters 76, and one or more viewers 78. This monitor module monitors the network management service to determine the availability of the various protocols available to any managed system. The engine module 74 evaluates the suitability of the various agreements for the current conversation based on the network conditions and the current connection selection settings of the managed system and the administrator, and selects the agreement/service. In accordance with the present invention, the agreement is continuously monitored during any conversation, and when the current dialog agreement becomes unavailable, or a more efficient dialog agreement is available, it is exchanged for an alternative dialog agreement (using the decision engine). In accordance with the present invention, additional protocol adapters can be incorporated into the system at any time so that the system can handle any new agreements. One or more viewers 78 allow the smart switch module to provide a viewer application to each user of the system.
下述流程圖顯示依據本發明之智慧型交換器模組(SSM)之功能性。流程圖假設一方案,其中有兩個連接協定可用,但可瞭解的是本發明可延伸使用任何數量的連接協定。The following flow chart shows the functionality of the Smart Switch Module (SSM) in accordance with the present invention. The flow chart assumes a scheme in which two connection agreements are available, but it will be appreciated that the invention extends the use of any number of connection agreements.
第8圖係一流程圖,其繪示依據本發明用於智慧型交換之一方法80。依據本發明,智慧型交換器(SSM)等候一連接請求來開始此方法。一接收到一連接請求(步驟82),SSM執行一建立連接演繹法(步驟84),其將參考第8圖有更詳細的說明。演繹法檢查系統優先性(位於一優先性資料庫85)及服務可用性來決定使用哪種連接方法和協定(例如一帶內協定或一帶外協定)。若一連接無法被建立(步驟86),則一錯誤被傳回使用者(步驟88)而方法完成。若連接被建立,則SSM會傳回並啟用一檢視者應用程式(步驟90)並開始監視連接(步驟92),其參考第10圖有更詳細的說明。若連接被使用者所終止(步驟94)(根據一連接終止請求),則連接關閉(步驟96)而此方法完成。若收到來自監示器連接模組(見第7圖)之一連接交換請求(步驟98),則嘗試一連接交換(步驟100)。一旦第二對話被建立,SSM回到步驟92之監示迴圈。若連接交換無法被完成(步驟102),則由於主要連接故障所致次要連接被選擇之情況下,因為此點沒有可用連接使得一錯誤被傳回(步驟104)。若次要連接因優先性之故被選擇卻不可用,而主要連接仍可用,則不會發生交換,而SSM會傳回步驟92之監視迴圈。現在,將說明依據本發明建立連接之方法。Figure 8 is a flow chart showing one method 80 for intelligent exchange in accordance with the present invention. In accordance with the present invention, a smart switch (SSM) waits for a connection request to begin the method. Upon receiving a connection request (step 82), the SSM performs a connection establishment deduction (step 84), which will be described in more detail with reference to FIG. Deductive checks system priority (located in a priority database 85) and service availability to determine which connection method and agreement to use (eg, an in-band agreement or a out-of-band agreement). If a connection cannot be established (step 86), an error is passed back to the user (step 88) and the method is completed. If the connection is established, the SSM will return and enable a viewer application (step 90) and begin monitoring the connection (step 92), which is described in more detail with reference to FIG. If the connection is terminated by the user (step 94) (according to a connection termination request), the connection is closed (step 96) and the method is completed. If a connection exchange request is received from the monitor connection module (see Figure 7) (step 98), then a connection exchange is attempted (step 100). Once the second conversation is established, the SSM returns to the monitoring loop of step 92. If the connection exchange cannot be completed (step 102), then the secondary connection is selected due to the primary connection failure, because no connection is available at this point such that an error is passed back (step 104). If the secondary connection is selected but not available due to priority, and the primary connection is still available, the exchange will not occur and the SSM will return to the monitoring loop of step 92. Now, a method of establishing a connection in accordance with the present invention will be explained.
第9圖係一流程圖,其繪示智慧型交換器模組在建立連接階段所採取動作之一方法100。注意此實施例中之智慧型交換器模組係一軟體模組,其呈現此智慧型交換器設備之一部份功能性。一旦請求連接,SSM詢問在優先性資料庫85中之系統優先性(步驟112)來判定那種連接類型可以用於一特定使用者、以及何者係較佳地用於此狀況下的特定使用者。若較佳的或主要連接類型可用(步驟114),則一連接利用此主要協定被建立(步驟118)以及一連接被傳回(步驟122)。一種用來檢查連接可用性之較佳方法使用習知網路服務可用性探測。若主要連接不可用,則次要連接類型被檢查可用性(步116)。若次要連接可用,則次要連接被建立(步驟120)而一連接被傳回(步驟122)。若次要連接亦不可用,則一錯誤被傳回(步驟124)。Figure 9 is a flow chart showing one method 100 of the action taken by the smart switch module during the establishment of the connection phase. Note that the smart switch module in this embodiment is a software module that presents a part of the functionality of the smart switch device. Once the connection is requested, the SSM queries the system priority in the priority database 85 (step 112) to determine which type of connection is available for a particular user, and which is better for the particular user in this situation. . If a preferred or primary connection type is available (step 114), then a connection is established using this primary agreement (step 118) and a connection is passed back (step 122). A preferred method for checking connection availability uses conventional network service availability detection. If the primary connection is not available, the secondary connection type is checked for availability (step 116). If a secondary connection is available, the secondary connection is established (step 120) and a connection is passed back (step 122). If the secondary connection is also unavailable, an error is passed back (step 124).
第10圖係一流程圖,其繪示在連接監視階段期間SSM所採取動作之一方法130。SSM探測當前之連接以判定其狀態(步驟132)。較加的,連接狀態可被協定轉接器直接監視或可使用一外部網路服務可用性(譬如一BIG_BROTHER)探測來監視連接狀態。此狀態被檢查(步驟134),且若連接不在可用時,模組傳回一連接狀態「不OK」(步驟136),並終止此方法。若連接OK,則此模組檢查看看是否自使用者檢視器接收到一終止請求(步驟138)。若收到一終止請求,此模組便傳回連接被終止(步驟140)並終止。接下來,在智慧型交換器模組被整合到使用者電腦時,模組檢查看看使用者檢視器是否請求一連接改變(步驟142)。若使用者檢視器請求一連接改變,則「CONNECTION_SWITCH」被傳回(步驟144)而模組被終止。接著讀取優先性(步驟146),並進行一檢查以判定當前連接是否為較佳的一者(步驟148)。若當前的連接是較佳的連接,則傳回「連接OK」(步驟150),而模組終止。若當前連接不是最佳的連接,則傳回「CONNECTION_SWITCH」,而模組終止。Figure 10 is a flow diagram showing one of the methods 130 taken by the SSM during the connection monitoring phase. The SSM probes the current connection to determine its status (step 132). In addition, the connection status can be directly monitored by the protocol adapter or an external network service availability (such as a BIG_BROTHER) probe can be used to monitor the connection status. This state is checked (step 134), and if the connection is not available, the module returns a connection status "NO" (step 136) and terminates the method. If the connection is OK, the module checks to see if a termination request has been received from the user viewer (step 138). Upon receipt of a termination request, the module returns that the connection is terminated (step 140) and terminates. Next, when the smart switch module is integrated into the user's computer, the module checks to see if the user viewer requests a connection change (step 142). If the user viewer requests a connection change, "CONNECTION_SWITCH" is passed back (step 144) and the module is terminated. The priority is then read (step 146) and a check is made to determine if the current connection is the preferred one (step 148). If the current connection is a better connection, then "Connect OK" is returned (step 150) and the module terminates. If the current connection is not the best connection, then "CONNECTION_SWITCH" is returned and the module terminates.
雖然前述中已參照本發明之特定實施例,熟於此技術領域者可明瞭實施例中可進行許多改變而仍屬於本發明之原則與精神及所附申請專利範圍界定之範圍While the invention has been described with reference to the specific embodiments of the present invention, it will be understood that
20...智慧型交換器系統20. . . Smart switch system
30...KVM/IP交換30. . . KVM/IP exchange
22...第一管理資料流twenty two. . . First management data flow
42...KVM連接42. . . KVM connection
24...第二管理資料流twenty four. . . Second management data flow
40...智慧型交換器模組40. . . Smart switch module
26...智慧流26. . . Wisdom flow
46...連接46. . . connection
50...纜線50. . . Cable
85...優先性資料庫85. . . Priority database
60...電腦系統60. . . computer system
82、84、86、88、90、92、94、96、98、100、102、104...步驟82, 84, 86, 88, 90, 92, 94, 96, 98, 100, 102, 104. . . step
62...CPU62. . . CPU
64...永久儲存裝置64. . . Permanent storage device
100...方法100. . . method
66...暫存記憶體66. . . Scratch memory
112、114、116、118、120、122、124...步驟112, 114, 116, 118, 120, 122, 124. . . step
68...典型作業系統68. . . Typical operating system
70...智慧型交換器軟體應用程式70. . . Smart switch software application
130...方法130. . . method
132、134、136、138、140、142、144、146、148、150...步驟132, 134, 136, 138, 140, 142, 144, 146, 148, 150. . . step
72...監視器模組72. . . Monitor module
74...引擎模組74. . . Engine module
76...協定轉接器76. . . Agreement adapter
78...檢視器78. . . Viewer
80...方法80. . . method
第1圖繪示帶內工具之使用。Figure 1 illustrates the use of in-band tools.
第2圖繪示帶外工具之使用。Figure 2 shows the use of the out-of-band tool.
第3圖繪示依據本發明之一智慧型交換器模組,其中繪示兩個從模組到被管理裝置之管理流。FIG. 3 illustrates a smart switch module according to the present invention, wherein the management flow of the two slave modules to the managed device is illustrated.
第4圖繪示利用KVM/IP之一傳統帶外存取解決方案。Figure 4 illustrates a traditional out-of-band access solution using KVM/IP.
第5圖繪示利用RDP之一傳統帶內存取解決方案。Figure 5 illustrates a conventional in-band access solution utilizing RDP.
第6圖繪示依據本發明之一實施例的一智慧型交換器模組。FIG. 6 illustrates a smart switch module in accordance with an embodiment of the present invention.
第7圖係依據本發明之一實施例的一智慧型交換器模組之一方塊圖第8圖係依據本發明之一實施例利用智慧型交換器模組之網路管理方法的一流程圖第9圖係一流程圖,其顯示由智慧型交換器模組建立連接的方法。FIG. 7 is a block diagram of a smart switch module according to an embodiment of the present invention. FIG. 8 is a flowchart of a network management method using a smart switch module according to an embodiment of the present invention. Figure 9 is a flow chart showing a method of establishing a connection by a smart switch module.
第10圖係顯示一種利用依據本發明之智慧型交換器模組來監視所建立連接之一流程圖。Figure 10 is a flow chart showing one of the established connections using the smart switch module in accordance with the present invention.
20...智慧型交換器系統20. . . Smart switch system
22...第一管理資料流twenty two. . . First management data flow
24...第二管理資料流twenty four. . . Second management data flow
26...智慧流26. . . Wisdom flow
Claims (18)
Applications Claiming Priority (1)
Application Number | Priority Date | Filing Date | Title |
---|---|---|---|
US11/127,850 US7552213B2 (en) | 2005-05-12 | 2005-05-12 | Remote network node management system and method |
Publications (2)
Publication Number | Publication Date |
---|---|
TW200705882A TW200705882A (en) | 2007-02-01 |
TWI385967B true TWI385967B (en) | 2013-02-11 |
Family
ID=37420479
Family Applications (1)
Application Number | Title | Priority Date | Filing Date |
---|---|---|---|
TW095116715A TWI385967B (en) | 2005-05-12 | 2006-05-11 | Smart-switch management module system and method |
Country Status (7)
Country | Link |
---|---|
US (1) | US7552213B2 (en) |
EP (1) | EP1880309B1 (en) |
CA (1) | CA2608341C (en) |
IL (1) | IL187266A (en) |
MY (1) | MY141389A (en) |
TW (1) | TWI385967B (en) |
WO (1) | WO2006124612A2 (en) |
Families Citing this family (49)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
EP1715395B1 (en) * | 2005-04-22 | 2008-06-11 | TRUMPF Laser GmbH + Co. KG | System for secure remote access |
US20070058657A1 (en) * | 2005-08-22 | 2007-03-15 | Graham Holt | System for consolidating and securing access to all out-of-band interfaces in computer, telecommunication, and networking equipment, regardless of the interface type |
US8112748B2 (en) * | 2005-09-01 | 2012-02-07 | International Business Machines Corporation | Method for operating software configured for internet access on a remote computer |
US20070094426A1 (en) * | 2005-10-24 | 2007-04-26 | Aten International Co., Ltd. | KVM switch supporting IPMI communications with computing devices |
US8145756B2 (en) * | 2005-12-22 | 2012-03-27 | Intel Corporation | Dynamic network identity architecture |
US7555570B2 (en) * | 2006-02-17 | 2009-06-30 | Avocent Huntsville Corporation | Device and method for configuring a target device |
US7852873B2 (en) * | 2006-03-01 | 2010-12-14 | Lantronix, Inc. | Universal computer management interface |
US8295157B1 (en) * | 2006-04-10 | 2012-10-23 | Crimson Corporation | Systems and methods for using out-of-band protocols for remote management while in-band communication is not available |
US20080040527A1 (en) * | 2006-08-14 | 2008-02-14 | Filipov Metodi N | Management module |
US7971238B2 (en) * | 2006-08-21 | 2011-06-28 | Dell Products L.P. | Two-factor authentication of a remote administrator |
US8090819B1 (en) * | 2007-05-31 | 2012-01-03 | American Megatrends, Inc. | Communicating with an in-band management application through an out-of band communications channel |
US8176168B1 (en) | 2007-05-31 | 2012-05-08 | American Megatrends, Inc. | Detecting the health of an operating system in virtualized and non-virtualized environments |
US20080313319A1 (en) * | 2007-06-18 | 2008-12-18 | Avocent Huntsville Corporation | System and method for providing multi-protocol access to remote computers |
US8255536B2 (en) * | 2008-03-21 | 2012-08-28 | Microsoft Corporation | Bandwidth and latency controller |
US8990447B1 (en) * | 2008-03-31 | 2015-03-24 | Total Phase, Inc. | Methods for embedding an out-of-band signal into a USB capture stream |
US20090260074A1 (en) * | 2008-04-10 | 2009-10-15 | Qlayer Nv | System and method for application level access to virtual server environments |
US8142019B2 (en) * | 2008-06-23 | 2012-03-27 | Charles Hernandez | Dolly and track system |
US7764682B2 (en) * | 2008-07-15 | 2010-07-27 | Unisys Corporation | Mainframe computing system having virtual IPMI protocol |
US8271704B2 (en) * | 2009-06-16 | 2012-09-18 | International Business Machines Corporation | Status information saving among multiple computers |
US9130903B2 (en) * | 2009-07-01 | 2015-09-08 | Citrix Systems, Inc. | Unified out of band management system for desktop and server sessions |
TWI414997B (en) * | 2009-08-19 | 2013-11-11 | Aten Int Co Ltd | Kvm remote management system providing customized certificate, signature and methoe thereof |
TWI395431B (en) * | 2009-10-16 | 2013-05-01 | Inventec Corp | Test method for session number |
US8504694B2 (en) * | 2010-03-08 | 2013-08-06 | Microsoft Corporation | Remote content classification and transmission using multiple transport channels |
CN102375769B (en) * | 2010-08-26 | 2016-12-28 | 罗普特(厦门)科技集团有限公司 | Test completeness control system and method |
US20120185528A1 (en) * | 2010-12-22 | 2012-07-19 | Aventura Hq, Inc. | Session allocation for distributed virtual desktop architecture |
TW201239614A (en) * | 2011-03-28 | 2012-10-01 | Wistron Corp | Automated test system and automated test method |
AU2014200353A1 (en) | 2013-01-24 | 2014-08-07 | Tadhg Kelly | Inline network switch having serial ports for out-of-band serial console access |
US9197504B2 (en) | 2013-03-12 | 2015-11-24 | Lenovo Enterprise Solutions (Singapore) Pte. Ltd. | Enhanced remote presence |
US9961125B2 (en) | 2013-07-31 | 2018-05-01 | Microsoft Technology Licensing, Llc | Messaging API over HTTP protocol to establish context for data exchange |
TWI533123B (en) | 2013-10-03 | 2016-05-11 | 緯創資通股份有限公司 | Method and system for automated test and result comparison |
US20150106660A1 (en) * | 2013-10-16 | 2015-04-16 | Lenovo (Singapore) Pte. Ltd. | Controller access to host memory |
TWI510020B (en) * | 2013-10-16 | 2015-11-21 | Chunghwa Telecom Co Ltd | Programmable Network Switch Management System and Method |
US10440066B2 (en) * | 2013-11-15 | 2019-10-08 | Microsoft Technology Licensing, Llc | Switching of connection protocol |
US9282072B1 (en) | 2014-11-14 | 2016-03-08 | Quanta Computer Inc. | Serial output redirection using HTTP |
US9942631B2 (en) * | 2015-09-25 | 2018-04-10 | Intel Corporation | Out-of-band platform tuning and configuration |
US9912526B2 (en) | 2015-10-21 | 2018-03-06 | At&T Intellectual Property I, L.P. | System and method for replacing media content |
CN106936616B (en) | 2015-12-31 | 2020-01-03 | 伊姆西公司 | Backup communication method and device |
US9967192B2 (en) * | 2016-02-22 | 2018-05-08 | Quanta Computer Inc. | Offloading of management controller traffic |
US10333772B2 (en) * | 2016-06-07 | 2019-06-25 | Quanta Computer Inc. | Remote keyboard-video-mouse technologies |
CN106506409B (en) * | 2016-11-30 | 2019-06-18 | 迈普通信技术股份有限公司 | A kind of management method and network management exchange of network management exchange |
US11175918B2 (en) * | 2017-09-18 | 2021-11-16 | American Megatrends International, Llc | Management protocol adapter |
US10791019B2 (en) * | 2017-12-28 | 2020-09-29 | Intel Corporation | Edge or fog gateway assisted out-of-band remote management for managed client devices |
US11025453B2 (en) * | 2018-03-23 | 2021-06-01 | Vmware, Inc. | Outside-of-network management of a component in a virtual data center using a remote display on a host management server |
US10805674B2 (en) * | 2018-10-16 | 2020-10-13 | Disney Enterprises, Inc. | Content aggregation and distribution for real-time and non-real-time production |
CN111107117A (en) * | 2018-10-26 | 2020-05-05 | 中兴通讯股份有限公司 | Virtual machine and remote control method, terminal, host server and storage medium thereof |
IL265789A (en) | 2019-04-01 | 2020-10-28 | Fibernet Ltd | Device for secure video streaming |
IL266118B2 (en) | 2019-04-17 | 2023-08-01 | Fibernet Ltd | Device for secure unidirectional audio transmission |
CN112769603B (en) * | 2020-12-31 | 2023-07-25 | 西安易朴通讯技术有限公司 | Out-of-band management switching device, method and server |
US20230342324A1 (en) * | 2022-04-25 | 2023-10-26 | Dell Products L.P. | Smart network interface controller serial communication redirection |
Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030233583A1 (en) * | 2002-06-13 | 2003-12-18 | Carley Jeffrey Alan | Secure remote management appliance |
US20050086494A1 (en) * | 2003-06-13 | 2005-04-21 | Carley Jeffrey A. | Secure management access control for computers, embedded and card embodiment |
-
2005
- 2005-05-12 US US11/127,850 patent/US7552213B2/en active Active
-
2006
- 2006-05-11 MY MYPI20062195A patent/MY141389A/en unknown
- 2006-05-11 TW TW095116715A patent/TWI385967B/en active
- 2006-05-12 CA CA2608341A patent/CA2608341C/en active Active
- 2006-05-12 EP EP06759696.5A patent/EP1880309B1/en active Active
- 2006-05-12 WO PCT/US2006/018464 patent/WO2006124612A2/en active Application Filing
-
2007
- 2007-11-08 IL IL187266A patent/IL187266A/en not_active IP Right Cessation
Patent Citations (2)
Publication number | Priority date | Publication date | Assignee | Title |
---|---|---|---|---|
US20030233583A1 (en) * | 2002-06-13 | 2003-12-18 | Carley Jeffrey Alan | Secure remote management appliance |
US20050086494A1 (en) * | 2003-06-13 | 2005-04-21 | Carley Jeffrey A. | Secure management access control for computers, embedded and card embodiment |
Also Published As
Publication number | Publication date |
---|---|
IL187266A0 (en) | 2008-02-09 |
IL187266A (en) | 2011-08-31 |
US7552213B2 (en) | 2009-06-23 |
CA2608341A1 (en) | 2006-11-23 |
US20060259612A1 (en) | 2006-11-16 |
EP1880309A4 (en) | 2009-12-09 |
WO2006124612A2 (en) | 2006-11-23 |
MY141389A (en) | 2010-04-30 |
EP1880309B1 (en) | 2014-08-06 |
CA2608341C (en) | 2012-07-31 |
WO2006124612A3 (en) | 2009-04-30 |
EP1880309A2 (en) | 2008-01-23 |
TW200705882A (en) | 2007-02-01 |
Similar Documents
Publication | Publication Date | Title |
---|---|---|
TWI385967B (en) | Smart-switch management module system and method | |
US8495208B2 (en) | Migrating virtual machines among networked servers upon detection of degrading network link operation | |
US7466713B2 (en) | Service processor gateway system and appliance | |
US7234082B2 (en) | Apparatus of remote server console redirection | |
EP3235199B1 (en) | Multicast advertisement message for a network switch in a storage area network | |
US20070260721A1 (en) | Physical server discovery and correlation | |
US20130205016A1 (en) | Remote monitoring and controlling of network utilization | |
CN108667638A (en) | A kind of network service configuration method and network management device | |
US20120254851A1 (en) | Energy Efficiency Control Policy Library | |
WO2021223454A1 (en) | Screen projection method and system | |
US7788392B2 (en) | Mechanism for universal media redirection control | |
US9832074B2 (en) | Converged infrastructure local management system | |
US11159489B2 (en) | Multi-link VPN link selection system | |
US10855805B2 (en) | Centralized storage-connected switch port auto-configuration system | |
KR20180004676A (en) | Method for providing virtual customer premises equipment services using a single internet line, and a network function virtualization cloud for the same | |
US11005782B2 (en) | Multi-endpoint adapter/multi-processor packet routing system | |
US10277700B2 (en) | Control plane redundancy system | |
KR101662801B1 (en) | Device redirection system for providing virtualization service | |
KR200273788Y1 (en) | Cluster system | |
US20230289318A1 (en) | Infrastructure management system | |
CN117579498A (en) | Method, system, equipment and medium for constructing electric power communication distribution network management system | |
CN115766549A (en) | Couplet test method and device, electronic equipment and storage medium | |
US20050101179A1 (en) | Apparatus for and method of channel resource management |